Fiduciaries must implement reasonable technical and organizational security measures to prevent data breaches. In case of a personal data breach, they must notify both the Data Protection Board and the affected individual ?as soon as practicable??enhancing transparency and accountability.
